Re:Not every elliptic curve is the same: trough on ECC secur...
by tptacek on Thursday August 04, 2016 @12:37PM
(#12226712)
We don't want to move to it because it's "more trusted". We want it because it's a better curve. Most critically: for the most common applications, Curve25519 avoids the need for point validation, eliminating a class of vulnerabilities. It's also much easier to implement in constant time.
Re:Not every elliptic curve is the same: trough on ECC secur...
by brohee on Thursday August 04, 2016 @05:45PM
(#12228702)
IIRC Curve25519 was introduced in 2005, possibly earlier but the earliest reference a cursory search finds is https://cr.yp.to/ecdh/curve25519-20051115.pdf from November 2005.
This "analysis" just isn't good at all.
My personal acid test to quickly check the worthiness of a page discussing crypto standards : whether IPsec is spelled correctly.
Edit: Curve25519 may have been unheard of in 2010.